AFLplusplus/LibAFL

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

2622 stars · 480 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

LibAFL is a Rust library of reusable building blocks for constructing custom coverage-guided fuzzers, developed by the AFL++ team. It scales across cores and machines via its LLMP message-passing layer and supports instrumentation backends including SanitizerCoverage, Frida, QEMU, and TinyInst.

Use cases

• build a custom coverage-guided fuzzer in Rust
• fuzz binary-only targets without source code using Frida or QEMU
• scale fuzzing across multiple cores and machines
• fuzz embedded or no_std targets like hypervisors
• instrument targets with SanitizerCoverage or custom backends
• fuzz structured inputs with AST-based input formats

When to choose

• you need a highly customizable fuzzer beyond what off-the-shelf tools like AFL++ offer
• you want to fuzz binary-only targets via Frida, QEMU, or TinyInst
• you need multi-platform fuzzing including Windows, macOS, Android, or no_std environments
• you want near-linear scaling across cores and machines

When to avoid

• you just want to run a fuzzer with minimal setup - use AFL++ or another off-the-shelf fuzzer instead
• your team does not know Rust and cannot write custom fuzzer code
• you need a GUI-driven fuzzing workflow

Facets

library · maturity active

fuzzing testing security security developer-tools testing windows rust cross-platform coverage-guided-fuzzing afl frida qemu no-std binary-only-fuzzing fuzzing-framework linux macos android ios

Member repositories

For agents

markdown · JSON · MCP: product_card(name="AFLplusplus/LibAFL")